Who’s in charge of security?
- Is one person responsible for security?
- Are your security rules written down?
- Do you know which laws apply to your data?
CYBERSECURITY RISK ASSESSMENT
Know where your business stands. Then fix it.
We look at how your business really works, tell you in plain English what is at risk, and help you put the right protections in place. No jargon. No surprise invoices.
SAMPLE SUAVEX RISK REPORT
58/ 100
High risk3 priority risks found
Example data, not a real client.
WHY LOOK NOW?
You can’t fix what you can’t see.
Most small businesses do not find their weak spots until something goes wrong. One clicked email or one reused password can shut down your office for days.
We help you find those gaps first, in plain English, and then help you close them. You run the business. We will handle the security questions.
EXAMPLE SCENARIO · ONE ORDINARY MONDAY
- 8:02 AMAn employee opens a convincing invoice email.
- 8:15 AMTheir email password is captured on a fake login page.
- 11:40 AMFake payment requests go out to your clients from your account.
- 2:00 PMYou find out from a client.
WHAT WE CHECK
Simple questions. Honest answers.
A clear picture.
We use the NIST Cybersecurity Framework 2.0, translated into everyday language.
Do you know what you have?
- Do you have a list of every computer and phone?
- Do you know where customer data is stored?
Are your accounts locked down?
- Do you have MFA on email?
- Are passwords stored securely?
- Are computers updated within 30 days?
Would you notice an attack?
- Is anyone watching for alerts after hours?
- Would you know about a login from another country?
Do you know who to call?
- Do you have a plan if you are hacked?
- Could you lock a stolen account in minutes?
Could you get back up fast?
- Would your backups survive ransomware?
- Have you ever tested restoring them?
PRICING
Fixed pricing.
No surprise invoices.
Choose the starting point that fits your business today.
SELF-ASSESSMENT
Instant SuaveX Risk Report
$249 one-time
- Guided online assessment, about 15 minutes
- Overall risk rating
- Scores across 6 areas of security
- Your top 3 risks, with what to do about each
VALIDATED ASSESSMENT
Expert-reviewed, with a full plan
$2,995 up to 25 employees
- Everything in the Self-Assessment
- A SuaveX expert walks through every answer with you
- Review of settings, policies, and records
- Plain-English report and step-by-step plan
- Recommended tools for every gap we find
HEALTHCARE EDITION
For medical and dental practices
$4,495 up to 25 employees
- Everything in the Validated Assessment
- HIPAA security risk analysis
- Built for medical and dental practices
Your $249 Self-Assessment fee counts toward any Validated Assessment.
Onsite walkthrough available for $1,500. Over 75 employees? Contact us for a custom quote.We do not stop at the report.Want help putting the fixes in place? We can set up tools like MFA, password managers, and backups. Quoted after your assessment.
Onsite walkthrough available for $1,500. Over 75 employees? Contact us for a custom quote.We do not stop at the report.Want help putting the fixes in place? We can set up tools like MFA, password managers, and backups. Quoted after your assessment.
KNOW YOUR OBLIGATIONS
Is a risk assessment
required for you?
General information, not legal advice. Talk with your attorney about your specific obligations.
Medical and dental practicesHIPAA
HIPAA requires every practice to have a written security risk analysis. Our Healthcare Edition includes it.
Tax preparers and accounting firmsFTC SAFEGUARDS
The FTC Safeguards Rule requires a written risk assessment for firms that handle client financial information.
Businesses that accept cardsPCI DSS
Card payment rules call for a yearly security self-assessment. Our report helps you get ready for it.
Law firmsETHICS RULES
Lawyers must make reasonable efforts to protect client information, and more clients and insurers now ask for proof.
Texas businessesSB 2610
Texas law can protect smaller businesses from punitive damages after a breach if they follow a recognized framework like NIST CSF.
THE SUAVEX METHOD
From “are we safe?”
to “we’re covered.”
Assess
Answer simple questions about how your business works today, like whether you use MFA and how passwords are stored. About 15 minutes.
Review
A SuaveX expert looks at your setup with you, confirms what is working, and finds what is missing.
Fix
Get your SuaveX Risk Report and a clear plan. Then we help you put the right tools in place, so the plan actually gets done.
WHY BUSINESSES TRUST SUAVEX
Real security experience, explained like a neighbor would.
We know exactly what to look for. Every assessment follows a proven framework, so nothing important gets missed.
No tech background needed. We explain what matters, skip what does not, and set the price before we start.
Veteran-led professionals who work in cybersecurity every day, and stay with you until the fixes are in place.
What standard do you follow?+
The NIST Cybersecurity Framework 2.0, translated into plain questions and plain answers.
Do I need to be technical?+
Not at all. The questions are written in plain English, and “Not sure” is always a fine answer.
Do you need access to our computers or network?+
No. We review your answers, documents, settings, and records with you.
What is the difference between the Self-Assessment and Validated Assessment?+
The Self-Assessment is based on your answers alone. In the Validated Assessment, a SuaveX expert reviews your answers and the records behind them, and you get a full step-by-step plan.
Can you help us fix what you find?+
Yes. We can set up tools such as MFA, password managers, and better backups. We quote that work after your assessment, so you know the cost up front.
Does this make us compliant or certified?+
No assessment does that on its own. Ours shows where you stand and what to fix, which is the first step toward meeting the rules that apply to you.
Is my information kept confidential?+
Yes. Your answers and documents are used only for your assessment.
YOUR NEXT MOVE
Every business has blind spots.
Let’s find yours.
Tell us about your business and we will show you where you stand, and how SuaveX can help.